Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So I was looking around under the hood of my ActiveDirectory setup (AD version for Windows Server 2008); specifically removing some stale exchange administrative group objects. And I was wondering if anyone knew of a MS article and/or third party web page which goes over some basic AD objects in ADSI edit. You know, where the user objects created in the GUI are? where the permissions objects are (if indeed they are separate objects) etc.

share|improve this question
You really should almost NEVER be using ADSI edit unless something is really broken - or in a few other cases. And if you don't already know what things are ... really really close ADSI please. – Zypher May 13 '11 at 15:40
Zypher, yes I know that it is a window to some very important behind the scenes objects in the ActiveDirectory, i'm merely browsing around. How else would I "know what things are"? :-/ – Archit Baweja May 13 '11 at 16:24
98% of what is in ADSI is exposed through the normal toold, ADUC, ADDT, ADSS. go to View-> Advanced Features in ADUC to see some of the lower level stuff – Zypher May 13 '11 at 16:41
Use Sysinternals ADExplorer while using a non-domain admin account. – mfinni May 13 '11 at 16:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.